Synch keeps your Obsidian vault in step across desktop and mobile with end-to-end encryption, on a sync server you host yourself. Every note is encrypted on your device before upload, so the server stores sealed blobs and cannot read your notes, your file paths, or your vault keys. Edits travel between devices in seconds over a realtime connection, and the encrypted version history brings back earlier drafts and deleted files when a cleanup goes too far. When the same note changes on two devices, a three-way merge combines edits that do not overlap and keeps a conflict copy when they do, so work is never silently overwritten. Markdown, images, audio, video, and PDFs sync by default, and folder exclusions keep big or private corners of the vault at home. Run the server with Docker Compose or as a systemd service, point the plugin at your own API address, and allow only the email addresses you invite. Each vault gets its own database file on your disk, and blob storage can move to any S3-compatible bucket when the vault outgrows local storage. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Your photo library belongs on infrastructure you control, encrypted so thoroughly that the server itself cannot peek, and that is exactly how Ente stores every picture and video you back up to it. Phone, desktop, and web clients encrypt each file on the device before upload, so backups, live photos, and videos arrive as ciphertext that only your keys can open. The browser app gives you the full library from anywhere: timelines, albums, favorites, a map of geotagged shots, and memories resurfacing old trips. Shared albums let family members add photos, comment, and like each other's shots, all still encrypted end to end. Collect links flip the flow around, giving wedding guests or clients a single link where they can drop their own photos into your album without creating an account. Face grouping and semantic search run on your devices, so you can find "beach sunset 2023" or every photo of a person without a server ever seeing the images. Duplicate detection and cleanup suggestions reclaim storage, exports download your entire library in open formats whenever you want it, and multiple accounts on one instance let a household share the same server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Paaster is the pastebin for snippets too sensitive for a public paste site: every paste is encrypted in your browser before upload, so the server only ever stores ciphertext it cannot read. Paste code or logs and the text is sealed with libsodium the moment you stop typing, with the secret riding in the link fragment that browsers never send to a server. Share the link and only its holder can open the paste; share it as a QR code, or beam it to your other device with a five-minute code using Send to device. Set a paste to delete after its first view or after a chosen time, protect it with an access code, and let automatic language detection syntax-highlight the result. Your own pastes stay browsable in a local history, themes and keyboard shortcuts keep the editor fast, and drag-and-drop file sharing works the same encrypted way. Upload from the terminal with the companion CLI or the REST API, and store everything in MongoDB with MinIO, S3, or Cloudflare R2 holding the encrypted blobs. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Write the messages today that the people you love would need if you suddenly could not send them, and LastSignal holds them encrypted until silence says it is time. The system emails you a check-in on a schedule you set; answer it and nothing happens, which is exactly the point. Miss one and reminders follow at fixed intervals, and the final reminder can ping a trusted contact who is able to pause the countdown, buying time when a hospital stay or a lost phone is the real story. If nobody responds, your messages are delivered by email to each recipient, who decrypts them with their own passphrase; the server never holds plaintext, so even the person running it cannot read what you wrote. You can stagger access with a per-recipient delay, so one person reads their message the day it arrives while another waits the number of days you chose. Automations can report in through a keep-alive token endpoint instead of email, for machines that prove you are around by staying alive themselves. Timings for check-ins, reminders, and the trusted-contact pause are all configurable per account. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Private text, encrypted before it leaves the browser: Enclosed turns passwords, keys, and other secrets into a link that only its holder can open, with no third-party service in between. Can the server read the note? No. It stores only ciphertext and settings, because the decryption key rides in the part of the link after the # sign, which browsers never send. Want a second lock? Add a password, or generate a random one with a click, and share it by another route. Worried about links lingering in chat history? Pick one hour, one day, one week, or one month, and tick Delete after reading so the first view removes the note, with a warning shown to the recipient beforehand. Need more than text? Attach files by button or drag and drop, and recipients download them one by one or all at once. Sending to a phone? Every finished note offers a QR code, downloadable as SVG or PNG. Setting it up for a team? Restrict note creation to signed-in users, create notes from the command line, and let people read the interface in 17 languages with light, dark, or system themes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Only the person holding the link can open what you share with SkySend, a self-hosted file and note sharing service that encrypts everything in the browser before it leaves your device. Sending a contract? Drop in the file, several files, or a whole folder, and share the link. Need documents from a client? Send an upload link instead, and whatever comes back is encrypted for you alone. Handing over a password or an SSH key? Write it into a note that burns after reading. Notes can mix text, Markdown, generated passwords, and highlighted code in a single page. Every share can expire by time, stop after a set number of downloads or views, and carry an optional password as a second lock. The command-line client uploads, downloads, and reads notes with the same encryption, and its full-screen mode shows each link as a QR code. No accounts are needed: My Links keeps your shares in the browser, and optional OIDC sign-in limits who may create them. Encrypted uploads sit on local disk or any S3-compatible bucket, and the interface offers 13 languages and three themes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.